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IN THE CLAIMS: 

1. (Currently amended) A method for electronic commerce, comprising: 

forming a four party payment protocol for electronic sales including a consumer's computer 
coupled to a merchant's computer and to an issuing bank computer via an issuer gateway, the 
merchant computer being further coupled to an acquiring bank computer; 

sending from a merchant's computer over an internet network to a consumer's computer, a 
merchant message including a wallet initiation message, a merchant digital signature, and a digital 
certificate from an acquiring bank, said wallet initiation message including a payment amount, an 
order description, and a timestamp; 

starting a consumer's wallet program in said consumer's computer in response to said wallet 
initiation message; 

sending from said consumer's computer consumer identity and authentication information 
and said merchant message, to an issuer gateway for an issuing bank; 

the issuing bank creating a reference number or value representing the consumer's credit or 
debit card number by repairing a table of credit card or debit card numbers and a corresponding table 
of reference numbers, the issuing bank pairing the consumer's card number with a selected reference 
number and outputting the reference number to the issuer gateway; 

verifying at said issuer gateway said merchant's signature to prove that the consumer is 
dealing with the actual merchant and validating at said issuer gateway the merchant's certificate and 
the acquirer's certificate to prove that the merchant and issuer share a common financial 
arrangement; 

said issuer gateway verifying the consumer's account and ensuring that at least one of funds 
and/or and credit are available to support the payment amount, then authorizing payment by sending 
to the consumer over said internet network an authorization token, an issuer's digital certificate, said 
wallet initiation message, and a reference to said consumer's credit or debit card number; 

said authorization token including the payment amount, order description, timestamp, a 
random nonce plus a merchant identifier and a reference to the consumer's credit or debit card 
number; and 
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said merchant's computer receiving said authorization token and fulfilling said order 
description. 

2. (Original) The method for electronic commerce of claim 1, which further comprises: 
sending from said consumer's computer a start message over the internet network to the 

merchants computer, to initiate said merchant's message. 

3. (Canceled) 

4. (Original) The method for electronic commerce of claim 1, wherein said merchant's 
computer further performs the steps comprising: 

receiving said authorization token; 

verifying the issuer's signature, digital certificate, the payment amount and merchant identity 
in the authorization token; 

verifying the freshness of the authorization token via the timestamp in the token; 
using the nonce in the authorization token to recognize duplicate tokens; and 
fulfilling said order description. 

5-14. (Canceled) 

15. (Original) The method for electronic commerce of claim 1, wherein said issuer gateway 
sends said authorization token to said consumer, and the consumer forwards said authorization token 
to said merchant. 

16. (Original) The method for electronic commerce of claim 1, wherein said issuer gateway 
sends said authorization token directly to said merchant. 
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1 7. (Original) The method for electronic commerce of claim 1 , wherein said reference to said 
credit card is an alias card number that is mapped at the issuing bank to the real card number, thereby 
preventing use of the consumers credit card number without said authorization token. 

18. (Original) The method for electronic commerce of claim 1 , wherein said reference to said 
card is an authorization number allocated uniquely by the issuer gateway for each authorization, 
enabling it to be passed by an acquirer gateway back to the issuing bank in a capture message; 

said issuing bank maintaining a database mapping authorization numbers to card numbers, 
so that when the issuing bank receives the capture message, it uses the database mapping to 
determine the consumer's card number. 

19-23. (Canceled) 

24. (Original) The method for electronic commerce of claim 1, wherein split shipments are 
supported by an additional message interaction between the merchant and issuer gateway, 
comprising: 

the merchant sending the authorization token to the issuer gateway identified in the issuer's 
digital certificate, including details of a split requirement, such as the amount of a first payment, the 
merchant authenticating the request by signing it and including the merchant's digital certificate; 

the issuer gateway verifying that the merchant signing message is the same merchant that 
signed an original request, verifying the split request according to business and risk management 
policies, and responding with a new authorization token in a message to the merchant; 

the merchant forwarding the new authorization token in a capture message the acquirer 
gateway; 

the merchant resubmitting the new authorization token to the acquirer gateway in a second 
message, whenever the merchant has shipped a second part of the shipment. 

25. (Original) The method for electronic commerce of claim 1, comprising: 
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the issuer offering the consumer a payment schedule conditioned on the merchant name from 
the merchant's digital certificate and the amount of payment from the initiation message. 

26. (Original) The method of claim 1 further comprising: 

sending a capture request message including the reference number representing the 
consumer's card number over the internet from the merchant to an acquirer gateway operating on 
behalf of an acquirer bank to capture the transaction and disburse payment to the merchant. 

27. (Original) The method of claim 1 further comprising the step of: 

settling accounts with the issuing bank by the acquiring bank over a private network by 
sending a settlement message that includes the reference number to the consumer's card number. 

28. (Original) The method of claim 1 further comprising the step of 

converting the reference number into the consumer's card number by the issuing bank and 
applying the transaction amount to the consumer's balance in his credit card or deposit account. 

29. (Original) The method of claim 1 further comprising the step of: 

proving that the issuing bank authorized the payment to the merchant by the combination of 
the issuing bank's signature on the authorization token, digital certificate, and the contents of the 
authorization token, providing undeniable proof that the issuing bank authorized the payment. 

30-54. (Canceled) 

5 5 . (Currently amended) A method of operating a four party payment protocol in accordance 
with a gateway associated with an issuing bank, the method comprising the steps of: 

receiving at the gateway, from a computer of a consumer, information associated with the 
consumer computer and a message associated with a computer of a merchant with which the 
consumer computer is engaging in a transaction, the merchant message comprising a wallet initiation 
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message, the wallet initiation message comprising a payment amount, an order description, a 
merchant identifier and a timestamp; 

receiving at the gateway, from the issuing bank, a reference number, the reference number 
having been created by the issuing bank and representing a credit card number or a debit card 
number of the consumer, the issuing bank maintaining a table of credit card numbers or debit card 
numbers and corresponding reference numbers wherein the consumer's card number is paired with 
the reference number; 

verifying at the gateway an account of the consumer and ensuring that at least one of funds 
and credit is available to support the payment amount; and 

authorizing payment by sending an authorization token, the authorization token comprising 
the payment amount, the order description, the merchant identifier, the timestamp, and the reference 
number, such that the merchant's computer will be able to receive receives the authorization token 
and initiate initiates fulfillment of the order description, send a capture request message comprising 
the reference number, for receipt by an acquirer bank, so as to capture the transaction and disburse 
payment to the merchant, and further wherein the issuing bank, in response to a message from the 
acquirer bank, will be able to convert converts the reference number into the consumer's credit card 
number or debit card number and apply applies the payment amount to a balance in the account of 
the consumer. 

56. (Original) The method of claim 55, wherein the gateway associated with the issuing bank 
sends the authorization token to the merchant computer via the consumer computer. 

57. (Original) The method of claim 55, wherein the gateway associated with the issuing bank 
sends the authorization token directly to the merchant computer. 

58. (Original) The method of claim 55, further comprising the step of the gateway associated 
with the issuing bank signing the authorization token. 
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59. (Currently amended) Apparatus for use in a gateway, associated with an issuing bank, for 
operating a four party payment protocol, the apparatus comprising: 

a memory; and 

at least one processor coupled to the memory and operative to: (i) receive at the gateway, 
from a computer of a consumer, information associated with the consumer computer and a message 
associated with a computer of a merchant with which the consumer computer is engaging in a 
transaction, the merchant message comprising a wallet initiation message, the wallet initiation 
message comprising a payment amount, an order description, a merchant identifier and a timestamp; 
(ii) receive at the gateway, from the issuing bank, a reference number, the reference number having 
been created by the issuing bank and representing a credit card number or a debit card number of the 
consumer, the issuing bank maintaining a table of credit card numbers or debit card numbers and 
corresponding reference numbers wherein the consumer's card number is paired with the reference 
number; (iii) verify at the gateway an account of the consumer and ensure that at least one of funds 
and credit is available to support the payment amount; and (iv) authorize payment by sending an 
authorization token, the authorization token comprising the payment amount, the order description, 
the merchant identifier, the timestamp, and the reference number, such that the merchant's computer 
will be able to receive receives the authorization token and initiate initiates fulfillment of the order 
description, send a capture request message comprising the reference number, for receipt by an 
acquirer bank, so as to capture the transaction and disburse payment to the merchant, and further 
wherein the issuing bank, in response to a message from the acquirer bank, will b e able to convert 
converts the reference number into the consumer's credit card number or debit card number and 
apply applies the payment amount to a balance in the account of the consumer. 

60. (Currently amended) A computer program product for operating a four party payment 
protocol in accordance with a gateway associated with an issuing bank, the computer program 
product comprising: 

computer program code for receiving at the gateway, from a computer of a consumer, 
information associated with the consumer computer and a message associated with a computer of 
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a merchant with which the consumer computer is engaging in a transaction, the merchant message 
comprising a wallet initiation message, the wallet initiation message comprising a payment amount, 
an order description, a merchant identifier and a timestamp; 

computer program code for receiving at the gateway, from the issuing bank, a reference 
number, the reference number having been created by the issuing bank and representing a credit card 
number or a debit card number of the consumer, the issuing bank maintaining a table of credit card 
numbers or debit card numbers and corresponding reference numbers wherein the consumer's card 
number is paired with the reference number; 

computer program code for verifying at the gateway an account of the consumer and ensuring 
that at least one of funds and credit is available to support the payment amount; and 

computer program code for authorizing payment by sending an authorization token, the 
authorization token comprising the payment amount, the order description, the merchant identifier, 
the timestamp, and the reference number, such that the merchant's computer will be able to receive 
receives the authorization token and initiate initiates fulfillment of the order description, send a 
capture request message comprising the reference number, for receipt by an acquirer bank, so as to 
capture the transaction and disburse payment to the merchant, and further wherein the issuing bank, 
in response to a message from the acquirer bank, will be able to convert converts the reference 
number into the consumer's credit card number or debit card number and apply applies the payment 
amount to a balance in the account of the consumer. 

61 . (Currently amended) A method of operating a four party payment protocol in accordance 
with a computer of a merchant, the method comprising the steps of: 

sending a message from the merchant computer to a computer of a consumer with which the 
merchant computer is engaging in a transaction, the merchant message comprising a wallet initiation 
message, the wallet initiation message comprising a payment amount, an order description, a 
merchant identifier and a timestamp, such that the merchant message will be sent to a gateway 
associated with an issuing bank, via the consumer computer, along with information associated with 
the consumer computer; 
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receiving at the merchant computer an authorization token sent by the gateway after the 
gateway has verified an account of the consumer and ensured that at least one of funds and credit is 
available to support the payment amount, the authorization token comprising the payment amount, 
the order description, the merchant identifier, the timestamp, and a reference number, the reference 
number having been created by the issuing bank and representing a credit card number or a debit 
card number of the consumer, the issuing bank maintaining a table of credit card numbers or debit 
card numbers and corresponding reference numbers wherein the consumer's card number is paired 
with the reference number; 

initiating fulfillment of the order description at the merchant computer; and 
sending, from the merchant computer to an acquirer bank, a capture request message 
comprising the reference number, so as to capture the transaction and disburse payment to the 
merchant, wherein the issuing bank, in response to a message from the acquirer bank, will b e abl e 
to convert converts the reference number into the consumer's credit card number or debit- card 
number and apply applies the payment amount to a balance in the account of the consumer. 

62 - 67. (Canceled) 
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